ci.yml

name: CI

on:
  pull_request:
  push:
    branches: [ main ]

jobs:
  scan_ruby:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up Ruby
        uses: ruby/setup-ruby@v1
        with:
          ruby-version: .ruby-version
          bundler-cache: true

      - name: Scan for common Rails security vulnerabilities using static analysis
        run: bin/brakeman --no-pager

  bundle_audit:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up Ruby
        uses: ruby/setup-ruby@v1
        with:
          ruby-version: .ruby-version
          bundler-cache: true

      - name: Patch-level verification for bundler
        run: bundle exec bundle-audit check --update

  bundle_integrity:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up Ruby
        uses: ruby/setup-ruby@v1
        with:
          ruby-version: .ruby-version
          bundler-cache: true

      - name: Runs Bundler checksum integrity checks against RubyGems API
        run: bundle exec bundler-integrity

  lol_dba:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up Ruby
        uses: ruby/setup-ruby@v1
        with:
          ruby-version: .ruby-version
          bundler-cache: true

      - name: Displays a list of database columns that probably should be indexed
        run: bundle exec lol_dba db:find_indexes

  scan_js:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up Ruby
        uses: ruby/setup-ruby@v1
        with:
          ruby-version: .ruby-version
          bundler-cache: true

      - name: Scan for security vulnerabilities in JavaScript dependencies
        run: bin/importmap audit

  lint_ruby:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up Ruby
        uses: ruby/setup-ruby@v1
        with:
          ruby-version: .ruby-version
          bundler-cache: true

      - name: Lint code for consistent style
        run: bin/rubocop -f github

  # test:
    # runs-on: ubuntu-latest

    # services:
    #  redis:
    #    image: redis
    #    ports:
    #      - 6379:6379
    #    options: --health-cmd "redis-cli ping" --health-interval 10s --health-timeout 5s --health-retries 5
    # steps:
    #   - name: Install packages
    #     run: sudo apt-get update && sudo apt-get install --no-install-recommends -y google-chrome-stable curl libjemalloc2 libsqlite3-0 libvips

    #   - name: Checkout code
    #     uses: actions/checkout@v4

    #   - name: Set up Ruby
    #     uses: ruby/setup-ruby@v1
    #     with:
    #       ruby-version: .ruby-version
    #       bundler-cache: true

    #   - name: Run tests
    #     env:
    #       RAILS_ENV: test
          # REDIS_URL: redis://localhost:6379/0
    #     run: bin/rails db:test:prepare test test:system

    #   - name: Keep screenshots from failed system tests
    #     uses: actions/upload-artifact@v4
    #     if: failure()
    #     with:
    #       name: screenshots
    #       path: ${{ github.workspace }}/tmp/screenshots
    #       if-no-files-found: ignore